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AMENDMENT TO THE SPECIFICATION 

Please amend the specification as follows. 
Please replace paragraph [65] with the following: 

-By way of example, a path selection rule may select the path based on any of the following path 
information in which IP packets match the rule: a primary path, a secondary path, and a tertiary path. The 
primary path is may be specified in any path selection rule. The secondary path is used only when the 
primary path has failed. If no secondary path is specified, any IP packets that match the rule can be 
discarded when the primary path fails. The tertiary path is specified only if a secondary path is specified. 
The tertiary path is selected if both the primary and secondary paths have failed. If no tertiary path is 
specified, any IP packets that match the rule can be discarded when both the primary and secondary 
paths fail. Path selection may be generalized such that the path selection rule can select up to N paths 
where the Nth path is used only if the (N-1)th path fails. The example above where N=3 is merely 
illustrative, although N is typically a fairly small number- 
Please replace paragraph [79] with the following: 

-When a Connection Request message is received from a peer TSK (step 403), the TCP 
Spoofing Kernel 280 allocates a CCB for the connection and then stores all of the relevant information 
from the CR message in the CCB. TSK 280 of PEP end point 404 then uses this information to generate 
a TCP <SYN> segment, as in step 415, to send to the remote host 406. The MSS in the <SYN> segment 
is set to the value received from the TSK peer of PEP end point 404. When the remote host responds with 
a TCP <SYN,ACK> segment (step 417), TSK 280 of PEP end point 402 404 sends a Connection 
Established message to its TSK peer of the r e mot e PEP end point 404 402 (step 419), including in the CE 
message the MSS that is sent by the local host in the <SYN,ACK> segment. TSK 280 of PEP end point 
402 404 also responds, as in step 421 , with a TCP <ACK> segment to complete the local three-way 
handshake. The peer TSK of PEP end point 404 then forwards the data that is received from TSK 280 to 
the host, per step 423. Concurrently, in step 425, the remote host 406 sends data to the peer TSK of PEP 
end point 404, which acknowledges receipt of the data by issuing an <ACK> segment to the r e mot e PEP 
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ond point AOA host 406 . per step 427. Simultaneously with the acknowledgement, the data is sent to TSK 
280 of PEP end point 402 (step 429).- 

Please replace paragraph [87] with the following: 

- For WAN-to-local traffic (i.e., downstream direction), the remote PEP end point 503 receives IP 
packets from its WAN interface 230 (Figure 2). IP packets that are not addressed to the end point 503 are 
simply forwarded (as appropriate) to the local interface 220 (Figure 2). IP packets addressed to the end 
point 503, which have a next protocol header type of " PEP Backbone Protocol ( PBP)" are forwarded to the 
backbone protocol kernel 503c. The backbone protocol kernel 503c extracts the TCP data and forwards it 
to the TCP spoofing kernel 503b for transmission on the appropriate spoofed TCP connection. In addition 
to carrying TCP data, the backbone protocol connection is used by the TCP spoofing kernel 501b to send 
control information to its peer TCP spoofing kernel 503b in the remote PEP end point 503 to coordinate 
connection establishment and connection termination- 
Please replace paragraph [91] with the following: 

„ [QQ 9 1 ] with respect to the backbone connection, the system 500 is suitable for application to a 
satellite network as the WAN. That is, the backbone protocol is optimized for satellite use in that control 
block resource requirements are minimized, and efficient error recovery for dropped packets are provided. 
The system 500 also provides a feedback mechanism to support maximum buffer space resource 
efficiency. Further, system 500 provides reduced acknowledgement traffic by using a single backbone 
protocol ACK to acknowledge the data of multiple TCP connections.- 

Please replace paragraph [92] with the following: 

- Figure 6 illustrates the flow of IP packets through a PEP end point, according to an embodiment 
of the present invention. When IP packets are received at the local LAN interface 220, the PEP end point 
210 determines (as shown by decision point A), whether the packets are destined for a host that is locally 
situated; if so, the IP packets are forwarded to the proper local LAN interface 220. If the IP packets are 
destined for a remote host, then the PEP end point 210 decides, per decision point B, whether the traffic is 
a TCP segment. If the PEP end point 210 determines that in fact the packets are TCP segments, then the 
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TSK 280 determines whether the TCP connection should be spoofed (decision point C) . However, if the 
PEP end point 210 determines that the packets are not TCP segments, then the BPK 282 processes the 
traffic, along with the PK 284 and the PSK 286 for eventual transmission out to the WAN. It should be 
noted that the BPK 282 does not process unspoofed IP packets; i.e., the packets flow directly to PK 284. 
As seen in Figure 6, traffic that is received from the WAN interface 230 is examined to determine whether 
the traffic is a proper PBP segment (decision point D) for the particular PEP end point 210; if the 
determination is in the affirmative, then the packets are sent to the BPK 282 and then the TSK 280.- 

Please replace paragraph [97] with the following: 

- Figure 8 shows the interfaces of the PEP end point implemented as an IP gateway, according to 
one embodiment of the present invention. By way of example, an IP Gateway 801 has a single local LAN 
interface, which is an enterprise interface 803. The IP Gateway 803 803 employs two WAN interfaces 805 
for sending and receiving IP packets to and from remote site PEP End Points: a backbone LAN interface 
and a wide area access (WAA) LAN interface. - 

Please replace paragraph [101] with the following: 

- Figure 10 shows a Multimedia VSAT implementation of the PEP end point, according to one 
embodiment of the present invention. A Multimedia VSAT 1001 , in an exemplary embodiment, has two 
local LAN interfaces 1003. Support for one or more local PPP serial port interfaces may be utilized. The 
Multimedia VSAT 1001 has two WAN interfaces 1005 for sending IP packets to hub site PEP End Points: 
a VSAT inroute and one of its LAN interfaces. The Multimedia VSAT 1001 thus has three interfaces for 
receiving IP packets from hub site PEP End Points, the VSAT outroute and both of its LAN interfaces 
1003. A Multimedia VSAT 4003 1001 may support uses of both of its LAN interfaces 4003 1001 at the 
same time for sending and receiving IP packets to and from hub site PEP End Points. The Multimedia 
VSAT 1003 further supports the use of a VADB serial port interface for sending and receiving IP packets 
to and from the hub site PEP End Points. - 
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